II 



(12) United States Patent 

Epstein et al. 



US006530021B1 

(io) Patent No.: US 6,530,021 Bl 
(45) Date of Patent: Mar. 4, 2003 



(54) METHOD AND SYSTEM FOR PREVENTING 
UNAUTHORIZED PLAYBACK OF 
BROADCASTED DIGITAL DATA STREAMS 

(75) Inventors: Michael Epstein, Spring Valley, NY 
(US); Michael Pasleka, Thornwood, 
NY (US) 

(73) Assignee: Koninkiyke Philips Electronics N.V., 
Eindhoven (NL) 

( * ) Notice: Subject to any disclaimer, the term of this 
patent is extended or adjusted under 35 
U.S.C. 154(b) by 0 days. 

(21) AppL No.: 09/323,808 

(22) Filed: Jun. 2, 1999 

Related U.S. Application Data 

(60) Provisional application No. 60/093,402, filed on Jul. 20, 
1998. 

(51) Int. CI. 7 G06F 1/24 

(52) U.S. CI 713/176; 713/161; 713/168; 

713/170 

(58) Field of Search 713/161, 168, 

713/170, 176, 200, 201 



(56) 



EP 
EP 
EP 



References Cited 

U.S. PATENT DOCUMENTS 

6,122,403 A * 9/2000 Rhoads 382/233 

6,131,162 A * 10/2000 Yoshiura et al 380/28 

6,216,228 Bl * 4/2001 Chapman et al 380/206 

6,233,347 Bl * 5/2001 Chen et al 382/100 

6,396,937 B2 * 5/2002 Chen et al 382/100 

FOREIGN PATENT DOCUMENTS 

0716544 12/1995 H04N/5/913 

0750423 6/1996 H04N/7/167 

0859503 8/1998 HO4N/1/O0 



WO W09743853 5/1997 H04N/5/913 

WO W09724832 7/1997 H04L/9/14 

WO W09833325 1/1998 H04N/7/50 

WO W09824236 6/1998 H04N/7/167 

OTHER PUBLICATIONS 

Linnartz et al., "Philips Electronics response to call for 
proposals issued by the Data Hiding Subgroup copy protec- 
tion technical working subgroup", Online, 1997, 
XP002118336, Retrieved form the Internet: gURL:http:// 
www.dvcc.com/dhsg, filename "philips_dhsg.rtf" "Propos- 
als". 

Sections H.a "Basic system concept" and I Lb Authorization 
ticket: a cryptographically secured CGMS system of section 
II "Copy-control system concept". 

* cited by examiner 

Primary Examiner — Thomas R. Pee so 

(74) Attorney, Agent, or Firm— Daniel J. Piotrowski 

(57) ABSTRACT 

A method and system are provided for preventing the 
unauthorized playback of broadcasted digital data streams. 
The method includes the step of embedding a watermark in 
a digital data stream. The digital data stream having the 
embedded watermark is encrypted. The encrypted digital 
data stream is broadcasted with a ticket. The encrypted 
digital data stream and the ticket are received. The ticket is 
saved and the encrypted digital data stream is provided to a 
decryption device to decrypt the digital data stream. The 
decrypted digital data stream is received from the decryption 
device. The watermark is extracted from the decrypted 
digital data stream. A one-way cryptographic hashing func- 
tion is applied to the saved ticket. The hashed ticket-is 
compared to the extracted watermark. Playback of the digital 
data stream is prevented, when the hashed ticket does not 
match the extracted watermark. 

11 Claims, 3 Drawing Sheets 
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METHOD AND SYSTEM FOR PREVENTING Copy protection includes various methods by which a 

UNAUTHORIZED PLAYBACK OF software engineer can write software so as to determine if it 

BROADCASTED DIGITAL DATA STREAMS has been copied and, if so, to deactivate itself. However, this 

scheme has been pretty much abandoned since such methods 
This application claims benefit of Sen No. 60/093,402, 5 have historically been circumvented, 
filed Jul. 20, 1998. Content extension refers to any system which attaches 

some extra information to the original content which indi- 
BACKGROUND cates whether or not a copy may be made. A software or 

hardware system must be specifically built around this 

1. Technical Field 1Q scheme to recognize the additional information and interpret 
The present invention relates generally to broadcast trans- it in an appropriate manner. Such software or hardware is 

missions and, in particular, to a method and system for generally referred to as being "compliant" with the scheme, 

preventing unauthorized playback of broadcasted digital ^ sample of a content extension system is the Serial 

data streams Copyright Management System embedded in Digital Audio 

. _ . . _ . . Tape (DAT) hardware. Under this system, additional infor- 

2. Background Description is matio v 0 - a ^ Qa the disc imrn£ i iatcly preceding each 

In the current environment of networks and with the track of audio content which indicates whether or not it can 

proliferation of digital and digitized multimedia content be copied. The hardware reads this information and uses is 

which may be distributed over such networks, a key issue is accordingly. 

copyright protection. Copyright protection is the ability to Information, such as that added in a content extension 

prevent or deter the proliferation of unauthorized copies of 20 scheme, may be incorporated into content to be protected 

copyrighted works. through the use of a watermark. The idea behind a water- 

A significant problem in the digital world is that an mark is that il should not be able to be removed from the 

unlimited number of perfect copies may be made from any ilem U corresponds to without actually destroying that item, 

piece of digital or digitized content. A perfect copy means Io me J*** 1 d ? m ? i "' a digital watermark is a imperceptible 

that if the original is comprised of a given stream of 25 or preferably mvmble identification code that is perma- 

numbers, then the copy matches the original, exactly, for ^ * " ****** f ' ^ « m ams Present 

each number in the stream. Thus, there is no degradation of ^^^l^SZ^^^T!^' 
t . » » i . * * . . * . copyright protection techniques implementing watermark- 

the original signal during the copy operation In an analog { been historical l de( J^ For e * t m 

copy, random noise is always introduced, which degrades 3o techa i ques implementing watermarking have been defeated 
the copied signal. by a technique referred to as averaging. Moreover, some 

The act of making unlicensed copies of some content, watermarking techniques may be defeated by simply ignor- 
whether digital or analog, audio, video, software of other, is ing the watermark (i.e., by not complying with the water- 
generally referred to as piracy. Piracy has been committed marking scheme). 

for the purpose of either profit (e.g., selling such unlicensed 3J The above problems are compounded by the proliferation 
copies) or to procure a copy of the content for personal use of digital devices. For example, digital televisions (e.g., high 
without having to pay for it. The definition of piracy has also definition television (HDTV)) are now being developed and 
been extended to cover the situation when copies of pro- marketed which enable playback of input digital signals, as 
tected materials are distributed without profit. The problem compared to conventional televisions which receive an 

of piracy is worse for digital content. This is because once ^ anal °g input signal. FIG. 1 is a block diagram of a conven- 
a pirate finds a way to defeat any existing protection ^cmd digital television 100. The television 100 includes: a 
schemes implemented to guard against piracy, he may then rece J v A r m > » conditional access (CA) module 104; and a 
make an unlimited number of copies without any degrada- Jj£ 106 opw^ly connecting receiver 102 and CAmodule 
tion in the quality of the copies. On the other hand, in the _ " . , . Jr . 

analog world, there is generally a degradation in the content M } n °P™}£*> » s « Dal 15 extracted from the airwaves via an 

y * iv . * . . ■r , • 45 antenna 108 and input to receiver 102. The receiver 102 

(signal) with each successive copy, thereby imposing a sort ' . j . i«7 *Vv_T ** 

r™-« „ ,u t e • forwards the signal to CA module 104 which decrypts the 

of natural limit on the volume of piracy. signal find ^ forwards ^ d(XTypU . d signal t0 

In general, three approaches have been implemented to receiver 102. Since bus 106 could be potentially tapped, a 
protect copyrights. They are encryption (the process of non-compliant recorder/player could masquerade as receiver 
encoding data for security purposes), copy protection, and 50 102 and make a bit-for-bit copy of, for example, a pay-per- 
content extensions. Copy protection and content extensions view program, on this bus. Thus, the bit-for-bit copy would 
generally apply to the digital world, while a scheme related be made after the signal has been decrypted by CA module 
to encryption, typically referred to gas scrambling, may be 104. The non-compliant recorder/player could then mas- 
applied to an analog signal. This is commonly found in queradc as CA module 104 so that the illicitly recorded 
analog cable systems. 55 program is displayed on receiver 102. In such a case, 

Encryption scrambles the content which, once it has been recei .\ er , 102 fa f nt ^crypted content (by the non-compliant 

encrypted, cannot be used until it is decrypted or ^"^l T*™* 5*. content / 1*8*™**. 

un.rambled. For example, encrypted vide, may ^pear as %ZX^%$£% " » ' M 

random patterns on a screen. The principle of encryption is ™ .. r ,,f ' . .. ... . 

you cannot ™w anythmg which « coherent unul you rf broadcasle J „,.„ » di itd ^ 

decrypt it using a special key. The key is obtained upon streams, 
paying for the protected content. However, encryption 

schemes are not without deficiency. For example, a pirate SUMMARY OF THE INVENTION 

could buy a single, encrypted copy of some content, which 65 The present invention is directed to a method and system 
he is entitled to decrypt. Then, the pirate could make for preventing unauthorized playback of digital data 
unlimited copies of the decrypted copy. streams. 
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In one aspect of the present invention, a method for 
preventing unauthorized, playback of digital data streams 
comprises the steps of: 

embedding a watermark in a digital data stream; 

encrypting the digital data stream having the embedded 
watermark; 

broadcasting the encrypted digital data stream with a 
ticket; 

receiving the encrypted digital data stream and the ticket; 
saving the ticket and providing the encrypted digital data 

stream to a decryption device to decrypt the digital data 

stream; s 
receiving the decrypted digital data stream from the 

decryption device; 
extracting the.watermark from the decrypted digital data 

stream; 

applying a one-way cryptographic hashing function to the 
saved ticket; 

comparing the hashed ticket to the extracted watermark; 
and 

preventing playback of the digital data stream, when the 
hashed ticket does not match the extracted watermark. 

In another aspect of the present invention, a system for 
preventing unauthorized playback of broadcasted digital 
data streams comprises: 

a bus; 

a conditional access module operatively coupled to the 
bus configured for decrypting encrypted digital data 
streams; 

a receiver operatively coupled to the bus configured for 
receiving an encrypted digital data stream having a 
watermark embedded therein and a ticket, saving the 
ticket, providing the encrypted digital data stream to 
the conditional access module, and receiving a 
decrypted digital data stream from the conditional 
access module, the receiver comprising: 
an extractor configured for extracting the watermark 

from the decrypted digital data stream; 
a hashing module configured for applying a one-way 

cryptographic hashing function to the saved ticket; 

and 

a comparison.module configured for comparing the 

hashed ticket to the extracted watermark; and 
an inhibitor configured for preventing playback of the 
digital data stream when the hashed ticket does not 
match the extracted watermark. 
These and other aspects, features and advantages of the 
present invention will become apparent from the following 
detailed description of preferred embodiments, which is to 
be read in connection with the accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWING 

FIG. 1 is a block diagram of a conventional digital 
television; 

FIG. 2 is a block diagram of a digital television that 
prevents unauthorized playback of digital data streams in 
accordance with an embodiment of the present invention; 
and 

FIG. 3 is a block diagram illustrating a method for 
preventing unauthorized playback of digital data streams in 
accordance with an embodiment of the present invention. 

DETAILED DESCRIPTION OF PREFERRED 
EMBODIMENTS 

The present invention is directed to a method and system 
for preventing unauthorized playback of digital data streams 
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which are legally broadcast, such as, for example, pay-per- 
view programs. In its most basic form, a playback device 
such as, for example, a digital television, tests the copyright 
status of received content and refuses to play such content if 
it is determined to be illegally obtained (e.g., from an 
unauthorized copy and not a live broadcast). 

To this end, the system and method of the present inven- 
tion rely upon a digital watermark and a reference mecha- 
nism referred to herein as a "ticket". Both the digital 
watermark and the ticket reflect various copy protection 
states. The digital watermark, or rather the copy protection 
state reflected by the digital watermark, is fixed. However, 
the ticket, or rather the copy protection state reflected by the 
ticket, is (cryptographically) modified as the content it is 
associated with is processed (e.g., played, recorded, or 
passed through). When content is to be played or recorded, 
the digital watermark is compared to the ticket. If the ticket 
checks against the watermark, the content may be displayed 
or recorded in accordance with the copy protection state. 
However, if the watermark and ticket do not correspond to 
one another, then the content is not displayable or record- 
able. 

A playback control method for physical media (e.g., 
digital video disks (DVDs)) which uses digital watermark- 
ing and a ticket is described in the article "Philips Electron- 
ics Response to Call for Proposals Issued by the Data Hiding 
Subgroup Copy Protection Technical Working Group", by 
Linnartz et al., Oct. 16, 1997. The Linnartz article also 
describes two illustrative methods for embedding water- 
marks in digital data. These two methods may also be used 
to embed watermarks in digital video streams according to 
the present invention. 

The first method embeds the watermark in the Motion 
Picture Expert Group (MPEG) coding of the digital video 
stream. The second method embeds the watermark in the 
pixel data of the digital video stream. However, as the 
method for embedding the watermark into the digital video 
stream is not critical to the present invention, methods other 
than the two described above may be used in accordance 
with the present invention. Accordingly, the above two 
methods and (heir corresponding advantages and disadvan- 
tages are not described herein in further detail herein. 

The copy protection states used in accordance with an 
embodiment of the present invention are shown in Table 1. 
However, it is to be appreciated that the present invention is 
not limited to those.copy protection states and other copy 
protection states may be used. 

TABLE 1 



Copy-Never 


The content may only be played, 




but not copied. 


Copy-No-More 


The content may only be played, 




but not copied. 


Copy-Once 


The content may be played and 




copied. However, the copy is 




altered so the content is in the 




Copy-Never state. 


Copy-Freely 


The content may be played and 




copied without restriction. 



The above four copy protection states allow for two 
categories of watermarks according to the embodiment of 
the present invention. That is, either the watermark classifies 
the content as "Copy-Once" or "Copy-No-More" or the 
watermark classifies the content as "Copy-Never". Distinc- 
tion between "Copy-Once" and "Copy-No-More" is made 
by the ticket, as explained hereinbelow. "Copy- Freely" is 
implemented by the absence of a watermark. 
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FIG. 2 is a block diagram of a digital television that ticket twice (step 312). A one-way cryptographic hashing 

prevents unauthorized playback of digital data streams (e.g., function is an algorithm that generates a fixed string of 

digital video streams) in accordance with an embodiment of numbers from a text message such that it is very difficult to 

the present invention. It is to be appreciated that while the turn the fixed string back into the text message. For example, 

present invention is described with reference to a digital 5 given M, it is easy to compute h. Given h it is hard to 

television, it may be implemented in any playback device compute M such that H(M)-h. Given M, it is hard to find 

(e.g., analog or digital) to prevent unauthorized playback of another message, M', such that H(M)-H(M'). For a more 

copyrighted content (e.g., digital video or audio content). detailed description of one-way hash functions, see 

condiional access (CA) module 204, and a bus 206 for io watermark V b y <i mpariaoil modu i e 214 (step 314). If the 

operativeiycouphng receiver 202 and CA module 204. The hashed ticket and the watermark match, then the content is 

receiver 202 includes: a hashing module 210; an extractor displayed (step 316). On the other hand, if the hashed ticket 

212; a comparison module 214; and an inhibitor 216. The am j tne watermark do not match, then inhibitor 216 prevents 

bus 206 is intended to be identical to the bus 106 of FIG. 1. the content from being displayed (step 318). The inhibitor 

In the embodiment, receiver 202 receives a signal via an is 216 may be realized as hardware or softwarc.(e.g., a piece of 

antenna 218. However, devices other than an antenna may code wn i c h prevents/allows playback based on the result of 

used such as, for example, a satellite dish. Moreover, the comparison module 214 

signal may be provided directly to receiver 202 via a cable , Qhibitor 216 Qts receiver 202 &Dm dis l ia ^n- 

or other direct transmission means. Upon receiving the tent which is put onto bus 206 (between CA module 204 and 

signal via ^ antenna i218 receiver 202 .forwards the signal to 20 receiyer 202) b a non . Uant j back device NoQ . 

CAmodule 204 which decrypts the signal and then forwards mp]iMl p i ayback of ±c decrypted content onto this bus 

the decrypted signal back to receiver 202. fails due to m{va 202 ^ receiving a ticket fn)m an 

For the purposes of this description, the following pre- originally broadcasted digital video stream prior to receiving 

sumptions are made: receiver 202 is compliant (i.e., able to the content from CA module 204. Since receiver 202 does 

read a watermark and honor a set of rules for licensing the 25 no t have a ticket, no check of the extracted watermark can 

received content (the copy protection states)); CA module be performed. Further, since the watermark indicates that the 

204 is secure; and bus 206 is insecure (e.g., subject to content is Copy-Never and no ticket has been saved from an 

tapping). original broadcast of the digital video stream, receiver 202 

As stated above, since, bus 206 could be potentially refuses to display the content, 

tapped, a non-compliant recorder/player could masquerade The following designations are used to implement the 

as receiver 202 and make a bit-for-bit copy of, for example, present invention: 

a pay-per-view program, on this bus. Thus, the bit-for-bit p physical Mark 

copy.would be made after the signal has been decrypted by T ricket m the state 

CA module 204. The non-compliant recorder/player could wwi u / Duu^r *• \ 

thco masquerade as CA module 204 so that the illicitly ^ * ?**P?* <° . p "f^ *» . 

recorded program is displayed on receiver 202. In such a *S"7T?- f P . ■ 5 ™? ^ ? 

/..c* w «.;, w rim ,-o ™l\ i „ ♦ j m t ♦ /u »k general, digital information stored on physical media such 

case, receiver 202 is sent decrypted content (by the non- r , . , . , ,. ^i,™ 

,. . • . , v j . • , • • as, for example, a digital video disc (DVD) may contain a 

compliant recorder/player) and assumes the content is egiti- Ch„«„ a i» SaI .1 • a- .■ ■ u u7 n™, 

mate Additionally, the recording can be transmitted fo a a $KSr ^ ld \ at leas distinguishes between ROM 

network of non-compliant playback devices. 40 and ^ d f ^ ^ P ^ mark ma , y ? * ^ 

A , , f . . . , unavailable to the user for the purpose of playing, but rather 

Advantageously, the present invention provides a refer- only available to me p i ayer for the purpose of determining 

ence ticket to prevent compliant receiver 202 from being me pro tection state of the disk (or a particular track(s)). 

fooled into accepting content that is not currently being M me physical mark is represented by a sequence of 

broadcast. An implementation of this ticket is shown in FIG. 45 numbcrS) a broadcasted ^ strcam may similarly 

3, which is a block diagram illustrating a method for have a "physical" mark associated therewith comprised of a 

preventing unauthorized playback of digital data streams in sequence of numbers 

accordance with an embodiment of the present invention. It ^ the physica i mark which u ^ t0 generate the ^ 

Initially, a watermark is embedded into the content to be That is, the ticket results by applying a one-way crypto- 

protected (step 300). The watermark indicates the copy 50 graphic hashing function. twice to the physical mark. This is 

protection state of the content. In the embodiment of FIG. 3, done prior to broadcasting the digital video stream as the 

the content is watermarked as Copy-Never. ticket is broadcasted with the video stream. Further, as stated 

The content (and watermark) is then encrypted (step 302). above, before the ticket is compared to the watermark (in 

In the case of MPEG video, the MPEG transport packets receiver 202), a one-way cryptographic hashing function is 

containing the content (and watermark) are encrypted. The 55 applied twice to the ticket to generate the watermark. This 

encrypted content and a ticket are then broadcasted (step may be represented by the following: 
304). In the case of MPEG video, the ticket is sent as 

un-encrypted private MPEG data. r-/WU w-H(fl(T)) 

The content and ticket are extracted from the airwaves via It is to be appreciated that while the hashing function is 

antenna 218 and input to receiver 202 of television 200 (step 60 applied to the ticket twice in the above example, the hashing 

306). The receiver 202 saves the un-encrypted ticket in store function may be applied to the ticket any number of times to 

218 and sends the encrypted content to CA module 204. The generate the watermark. It is to be further appreciated that 

CA module 106 then decrypts the content and sends the the ticket that is acquired from the broadcast stream can 

decrypted content back to receiver 202 (step 308). The optionally be destroyed. This may be done after a predefined 

extractor 212 of receiver 202 extracts the watermark from 65 period of time using, for example, a count down counter or 

the content (step 310). Hashing module 210 of receiver 202 a real time clock. Alternatively, the ticket may be destroyed 

applies a one-way cryptographic hashing function to the after power to the television is turned off. 
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Use of a (cryptographic) reference ticket according to the 
present invention provides a significantly secure method for 
preventing unauthorized playback of digital data streams. 
Thus, the playback of programs and services restricted to 
those who have paid for the same may be controlled. As 
such, piracy of such programs and services may be thwarted. 
Moreover, since piracy results in significant revenue loss, 
preventing such piracy may conceivably result in the pre- 
viously pirated content being provided to legitimate con- 
sumers at a lower cost. 

Although the illustrative embodiments have been 
described herein with reference to the accompanying 
drawings, it is to be understood that the present system and 
method is not limited to those precise embodiments, and that 
various other changes and modifications may be affected 
therein by one skilled in the art without departing from the 
scope or spirit of the invention. All such changes and 
modifications are intended to be included within the scope of 
the invention as defined by the appended claims. 

What is claimed is: 

1. A method for preventing unauthorized playback of 
digital data streams, comprising the steps of: 

broadcasting an encrypted digital data stream with a 
ticket, the stream having a watermark embedded 
therein; 

receiving the encrypted digital data stream and the ticket; 
saving the ticket and providing the encrypted digital data 

stream to a decryption device to decrypt the digital data 

stream; 

receiving the decrypted digital data stream from the 

decryption device; 
extracting the watermark from the decrypted digital data 

stream; 

applying a one-way cryptographic hashing function to the 
saved ticket; 

comparing the hashed ticket to the extracted watermark; 
and 

preventing playback of the digital data stream, when the 
hashed ticket does not match the extracted watermark. 

2. A method for preventing unauthorized playback of 
digital data streams, comprising the steps of: 

embedding a watermark in a digital data stream; 
encrypting the digital data stream having the embedded 
watermark; 

broadcasting the encrypted digital data stream with a 
ticket; 

receiving the encrypted digital data stream and the ticket; 
saving the ticket and providing the encrypted digital data 

stream to a decryption device to decrypt the digital data 

stream; 

receiving the decrypted digital data stream from the 
decryption device; 
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extracting the watermark from the decrypted digital data 
stream; 

applying a one-way cryptographic hashing function to the 
saved ticket; 

comparing the hashed ticket to the extracted watermark; 
and 

preventing playback of the digital data stream, when the 
hashed ticket does not match the extracted watermark. 

3. The method according to claim 2, wherein said apply- 
ing^tep is performed more than once. 

4. The method according to claim 2, further comprising 
the steps of: 

generating the ticket by applying the one-way crypto- 
graphic hashing function to a sequence of numbers. 

5. The method according to claim 4, wherein the one-way 
cryptographic hashing function is applied more than once to 
the sequence of numbers. 

6. The method according to claim 2, further comprising 
the step of allowing playback of the digital data stream, 
when the hashed ticket matches the extracted watermark. 

7. The method according to claim 2, further comprising 
the step of destroying the ticket. 

8. A system for preventing unauthorized playback of 
broadcasted digital data streams, comprising: 

a bus; 

a conditional access module operatively coupled to said 
bus configured for decrypting encrypted digital data 
streams; 

a receiver operatively coupled to said bus configured for 
receiving an encrypted digital data stream having a 
watermark embedded therein and a ticket, saving the 
ticket, providing the encrypted digital data stream to 
said conditional access module, and receiving a 
decrypted digital data stream from said conditional 
access module, the receiver comprising; 
an extractor configured for extracting the watermark 

from the decrypted digital data stream; 
a hashing module configured for applying-a one-way 

cryptographic hashing function to the saved ticket; 

and 

a comparison module configured for comparing the 
hashed ticket to the extracted watermark; and 

an inhibitor configured for preventing playback of the 
digital data stream when the hashed ticket does not 
match the extracted watermark. 

9. The system according to claim 8, wherein said hashing 
module applies the one-way cryptographic hashing function 
to the ticket more than once. 

10. The system according to claim 8, wherein said ticket 
is destroyed upon entering a power down mode. 

11. The system according to claim 8, wherein said ticket 
is destroyed after a predetermined lime period. 
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